6.5

CVE-2023-25752

EPSS 0.1%
Veröffentlicht 02.06.2023 17:15:11
Zuletzt bearbeitet 21.11.2024 07:50:04
Quelle security@mozilla.org
Teams Watchlist Login
Unerledigt Login

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 111.0

Mozilla ≫ Firefox ESR Version < 102.9

Mozilla ≫ Thunderbird Version < 102.9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.279

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

https://www.mozilla.org/security/advisories/mfsa2023-09/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-10/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2023-11/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1811627

Vendor Advisory

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2023-25752

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-25752

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-25752

EUVD